Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/buv7cpbD2_qBqc3yzllspI2eDCw.roa
File: buv7cpbD2_qBqc3yzllspI2eDCw.roa (raw, json)
Hash identifier: FnBWgPfw3EM1W/P2WkOmibC96JoWkyLSwbmqexHTx+E=
Subject key identifier: 6E:EB:FB:72:96:C3:DB:FA:81:A9:CD:F2:CE:59:6C:A4:8D:9E:0C:2C
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018EF7DD1930FED949B92DFD68AB6087BE41
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/buv7cpbD2_qBqc3yzllspI2eDCw.roa
Signing time: Fri 19 Apr 2024 19:37:26 +0000
ROA not before: Fri 19 Apr 2024 19:37:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 82.163.52.0/23 maxlen: 24
149.126.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:dd:19:30:fe:d9:49:b9:2d:fd:68:ab:60:87:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Apr 19 19:37:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eebfb7296c3dbfa81a9cdf2ce596ca48d9e0c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:7b:3d:2c:08:76:30:13:9d:18:73:fd:d1:
d9:d3:2d:65:4e:b5:a9:d4:bc:28:9b:6b:f6:ed:fd:
57:1e:e7:ae:45:2f:d6:36:61:91:7f:5e:de:83:ca:
b8:d5:a7:a3:19:44:55:74:4d:f7:6e:40:fc:0a:a0:
b1:ea:59:a4:31:45:93:f6:b3:eb:ee:44:b4:64:7b:
c9:c3:a5:fa:e6:61:1c:22:3d:6e:97:92:ee:96:7d:
c5:37:63:98:fc:05:71:65:03:ae:e6:f4:33:e7:c6:
5d:c8:d0:8b:73:9c:cc:e7:0f:20:75:c5:03:c3:cb:
67:e5:37:06:e2:a5:8b:34:69:a4:e1:fe:0a:97:f1:
68:18:3d:d4:48:f7:b3:8c:76:5a:85:86:bf:55:b8:
d8:a3:06:31:a0:19:2b:2d:2f:a8:ab:51:31:52:64:
c8:fa:cd:fc:d9:e1:39:07:e3:b7:1c:8e:f6:80:2a:
50:d7:1b:77:78:98:26:d2:44:7f:c9:b0:7a:8e:55:
03:9d:41:36:6a:c3:0d:1c:fb:18:a3:c6:20:c1:0a:
67:70:a8:94:30:26:b3:52:73:3f:be:5a:38:66:b5:
48:d3:5f:7d:76:38:70:37:6b:af:d0:a6:fa:8d:97:
0c:97:83:47:3b:29:e0:38:b1:f4:e6:d1:1c:d5:e1:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EB:FB:72:96:C3:DB:FA:81:A9:CD:F2:CE:59:6C:A4:8D:9E:0C:2C
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/buv7cpbD2_qBqc3yzllspI2eDCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.52.0/23
149.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:b0:2d:38:ba:97:5c:51:cd:36:ec:d2:fe:30:dc:9e:33:e8:
ec:f7:cc:53:85:ab:9b:d0:18:0e:e8:75:0d:a2:73:52:9d:79:
ed:76:d6:56:a8:9e:af:d5:65:6d:09:78:87:06:60:e5:bb:c1:
a5:19:dd:62:4c:37:76:4d:58:e5:d5:e4:ca:7b:8a:f8:d0:c1:
8e:17:39:69:e3:9e:73:30:06:7d:39:21:a3:84:1e:a0:f3:b1:
3a:50:87:33:6a:c0:03:12:c4:0e:44:d6:27:01:58:1b:c0:54:
00:b5:7f:85:5a:0a:4b:2d:e6:e9:a9:ed:6a:66:9b:38:ca:1f:
51:f1:1b:6f:8b:b4:3f:1c:5c:c1:68:0a:b8:0b:67:f6:c6:a3:
75:4e:2b:bf:1d:4c:94:74:96:62:90:94:53:c7:b4:82:f2:f2:
0d:42:8e:eb:b0:cd:d0:20:6a:9b:f5:60:12:6a:58:26:2f:97:
ad:cb:eb:30:fe:16:06:32:8d:af:d2:9f:ce:32:d1:1d:5d:2f:
a2:9c:60:88:ff:4b:56:a2:dd:6e:8d:ab:23:30:81:d4:95:e4:
5b:dd:32:d7:22:c8:ac:41:03:1a:7e:b4:f4:d4:be:7a:08:dc:
0a:5f:87:8a:3d:2a:73:a6:1d:ef:96:61:6f:41:58:06:e9:1d:
c0:ee:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:43:02 2024 by rpki-client on console-ams.rpki-client.org